# MS 3월 보안 위협에 따른 정기 보안 업데이트 권고\[2023-03]

## MS 3월 보안 위협에 따른 정기 보안 업데이트 권고

### □ 3월 보안업데이트 개요(총14종)

o 등급:긴급(Critical) 8종,중요(Important) 6종 

o 발표일: 2023.3.14.(화) o 업데이트 내용

| 제품군                                                | 중요도 | 영향         |
| -------------------------------------------------- | --- | ---------- |
| Windows 11 v22H2                                   | 긴급  | 원격 코드 실행   |
| Windows 11 v21H2                                   | 긴급  | 원격 코드 실행   |
| Windows 10 v22H2, Windows 10 21H2, Windows 10 20H2 | 긴급  | 원격 코드 실행   |
| Windows Server 2022                                | 긴급  | 원격 코드 실행   |
| Windows Server 2019                                | 긴급  | 원격 코드 실행   |
| Windows Server 2016                                | 긴급  | 원격 코드 실행   |
| Windows Server 2012 R2및Windows Server 2012         | 긴급  | 원격 코드 실행   |
| Microsoft Office                                   | 긴급  | 권한 상승      |
| Microsoft SharePoint                               | 중요  | 보안 기능 바이패스 |
| <p>Microsoft Exchange Server</p><p>(재릴리스)</p>      | 중요  | 원격 코드 실행   |
| Microsoft Visual Studio                            | 중요  | 원격 코드 실행   |
| Microsoft Dynamics 365                             | 중요  | 보안 기능 바이패스 |
| <p>Microsoft Azure관련 </p><p>소프트웨어</p>              | 중요  | 보안 기능 바이패스 |
| Microsoft Malware Protection Engine                | 중요  | 권한 상승      |

### \[참고 사이트]&#x20;

\[1] (한글) <https://portal.msrc.microsoft.com/ko-kr/security-guidance&#x20>;

\[2] (영문) <https://portal.msrc.microsoft.com/en-us/security-guidance&#x20>;

\[3] <https://msrc.microsoft.com/update-guide/releaseNote/2023-Mar&#x20>;

\[4] <https://msrc.microsoft.com/update-guide>

#### o취약점 요약 정보

<table><thead><tr><th width="202.33333333333331">제품 카테고리</th><th width="174">CVE번호</th><th>CVE제목</th></tr></thead><tbody><tr><td>Microsoft OneDrive</td><td>CVE-2023-24930</td><td>MacOS용Microsoft OneDrive권한 상승 취약성</td></tr><tr><td>Microsoft OneDrive</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24923">CVE-2023-24923</a></td><td>Android용Microsoft OneDrive정보 공개 취약성</td></tr><tr><td>Microsoft Dynamics</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24922">CVE-2023-24922</a></td><td>Microsoft Dynamics 365정보 공개 취약성</td></tr><tr><td>Microsoft Dynamics</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24921">CVE-2023-24921</a></td><td>Microsoft Dynamics 365(온-프레미스)교차-사이트 스크립팅 취약성</td></tr><tr><td>Microsoft Dynamics</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24920">CVE-2023-24920</a></td><td>Microsoft Dynamics 365(온-프레미스)교차-사이트 스크립팅 취약성</td></tr><tr><td>Microsoft Dynamics</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24919">CVE-2023-24919</a></td><td>Microsoft Dynamics 365(온-프레미스)교차-사이트 스크립팅 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24913">CVE-2023-24913</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24911">CVE-2023-24911</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 정보 공개 취약성</td></tr><tr><td>Microsoft Graphics Component</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24910">CVE-2023-24910</a></td><td>Windows그래픽 구성 요소 권한 상승 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24909">CVE-2023-24909</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Windows Remote Procedure Call Runtime</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24908">CVE-2023-24908</a></td><td>원격 프로시저 호출 런타임 원격 코드 실행 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24907">CVE-2023-24907</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24906">CVE-2023-24906</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 정보 공개 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24892">CVE-2023-24892</a></td><td>Microsoft Edge(Chromium기반) Webview2스푸핑 취약성</td></tr><tr><td>Microsoft Dynamics</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24891">CVE-2023-24891</a></td><td>Microsoft Dynamics 365(온-프레미스)교차-사이트 스크립팅 취약성</td></tr><tr><td>Microsoft OneDrive</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24890">CVE-2023-24890</a></td><td>iOS용Microsoft OneDrive보안 기능 바이패스 취약성</td></tr><tr><td>Microsoft OneDrive</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24882">CVE-2023-24882</a></td><td>Android용Microsoft OneDrive정보 공개 취약성</td></tr><tr><td>Windows SmartScreen</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24880">CVE-2023-24880</a></td><td>Windows SmartScreen보안 기능 우회 취약성</td></tr><tr><td>Microsoft Dynamics</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24879">CVE-2023-24879</a></td><td>Microsoft Dynamics 365(온-프레미스)교차-사이트 스크립팅 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24876">CVE-2023-24876</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24872">CVE-2023-24872</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Windows Bluetooth Service</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24871">CVE-2023-24871</a></td><td>Windows Bluetooth서비스 원격 코드 실행 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24870">CVE-2023-24870</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 정보 공개 취약성</td></tr><tr><td>Windows Remote Procedure Call Runtime</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24869">CVE-2023-24869</a></td><td>원격 프로시저 호출 런타임 원격 코드 실행 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24868">CVE-2023-24868</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24867">CVE-2023-24867</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24866">CVE-2023-24866</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 정보 공개 취약성</td></tr><tr><td>Microsoft Printer Drivers</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24865">CVE-2023-24865</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 정보 공개 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24864">CVE-2023-24864</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 권한 상승 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24863">CVE-2023-24863</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 정보 공개 취약성</td></tr><tr><td>Windows Secure Channel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24862">CVE-2023-24862</a></td><td>Windows보안 채널 서비스 거부 취약성</td></tr><tr><td>Windows Win32K</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24861">CVE-2023-24861</a></td><td>Windows그래픽 구성 요소 권한 상승 취약성</td></tr><tr><td>Windows Internet Key Exchange (IKE) Protocol</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24859">CVE-2023-24859</a></td><td>Windows IKE(Internet Key Exchange)확장 서비스 거부 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24858">CVE-2023-24858</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 정보 공개 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24857">CVE-2023-24857</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 정보 공개 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24856">CVE-2023-24856</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 정보 공개 취약성</td></tr><tr><td>Visual Studio</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23946">CVE-2023-23946</a></td><td>GitHub: CVE-2023-23946 Git경로 통과 취약성</td></tr><tr><td>Visual Studio</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23618">CVE-2023-23618</a></td><td>GitHub: CVE-2023-23618 Git for Windows원격 코드 실행 취약성</td></tr><tr><td>Windows Kernel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23423">CVE-2023-23423</a></td><td>Windows커널 권한 상승 취약성</td></tr><tr><td>Windows Kernel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23422">CVE-2023-23422</a></td><td>Windows커널 권한 상승 취약성</td></tr><tr><td>Windows Kernel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23421">CVE-2023-23421</a></td><td>Windows커널 권한 상승 취약성</td></tr><tr><td>Windows Kernel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23420">CVE-2023-23420</a></td><td>Windows커널 권한 상승 취약성</td></tr><tr><td>Windows Resilient File System (ReFS)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23419">CVE-2023-23419</a></td><td>Windows ReFS(복원 파일 시스템)권한 상승 취약성</td></tr><tr><td>Windows Resilient File System (ReFS)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23418">CVE-2023-23418</a></td><td>Windows ReFS(복원 파일 시스템)권한 상승 취약성</td></tr><tr><td>Windows Partition Management Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23417">CVE-2023-23417</a></td><td>Windows파티션 관리 드라이버 권한 상승 취약성</td></tr><tr><td>Windows Cryptographic Services</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23416">CVE-2023-23416</a></td><td>Windows암호화 서비스 원격 코드 실행 취약성</td></tr><tr><td>Internet Control Message Protocol (ICMP)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23415">CVE-2023-23415</a></td><td>ICMP(Internet Control Message Protocol)원격 코드 실행 취약성</td></tr><tr><td>Windows Point-to-Point Protocol over Ethernet (PPPoE)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23414">CVE-2023-23414</a></td><td>Windows PPPoE(Point-to-Point Protocol over Ethernet)원격 코드 실행 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23413">CVE-2023-23413</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Windows Accounts Control</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23412">CVE-2023-23412</a></td><td>Windows계정 사진 권한 상승 취약성</td></tr><tr><td>Role: Windows Hyper-V</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23411">CVE-2023-23411</a></td><td>Windows Hyper-V서비스 거부 취약성</td></tr><tr><td>Windows HTTP.sys</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23410">CVE-2023-23410</a></td><td>Windows HTTP.sys권한 상승 취약성</td></tr><tr><td>Client Server Run-time Subsystem (CSRSS)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23409">CVE-2023-23409</a></td><td>CSRSS(Client Server Run-Time Subsystem)정보 공개 취약성</td></tr><tr><td>Azure</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23408">CVE-2023-23408</a></td><td>Azure Apache Ambari스푸핑 취약성</td></tr><tr><td>Windows Point-to-Point Protocol over Ethernet (PPPoE)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23407">CVE-2023-23407</a></td><td>Windows PPPoE(Point-to-Point Protocol over Ethernet)원격 코드 실행 취약성</td></tr><tr><td>Microsoft PostScript Printer Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23406">CVE-2023-23406</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Windows Remote Procedure Call Runtime</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23405">CVE-2023-23405</a></td><td>원격 프로시저 호출 런타임 원격 코드 실행 취약성</td></tr><tr><td>Remote Access Service Point-to-Point Tunneling Protocol</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23404">CVE-2023-23404</a></td><td>Windows지점 간 터널링 프로토콜 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Printer Drivers</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23403">CVE-2023-23403</a></td><td>Microsoft PostScript및PCL6 Class프린터 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Windows Codecs Library</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23402">CVE-2023-23402</a></td><td>Windows Media원격 코드 실행 취약성</td></tr><tr><td>Microsoft Windows Codecs Library</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23401">CVE-2023-23401</a></td><td>Windows Media원격 코드 실행 취약성</td></tr><tr><td>Role: DNS Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23400">CVE-2023-23400</a></td><td>Windows DNS서버 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Office Excel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23399">CVE-2023-23399</a></td><td>Microsoft Excel원격 코드 실행 취약성</td></tr><tr><td>Microsoft Office Excel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23398">CVE-2023-23398</a></td><td>Microsoft Excel Spoofing Vulnerability</td></tr><tr><td>Microsoft Office Outlook</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397">CVE-2023-23397</a></td><td>Microsoft Outlook Elevation of Privilege Vulnerability</td></tr><tr><td>Microsoft Office Excel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23396">CVE-2023-23396</a></td><td>Microsoft Excel서비스 거부 취약성</td></tr><tr><td>Microsoft Office SharePoint</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23395">CVE-2023-23395</a></td><td>Microsoft SharePoint Server스푸핑 취약성</td></tr><tr><td>Client Server Run-time Subsystem (CSRSS)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23394">CVE-2023-23394</a></td><td>CSRSS(Client Server Run-Time Subsystem)정보 공개 취약성</td></tr><tr><td>Windows Central Resource Manager</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23393">CVE-2023-23393</a></td><td>Windows BrokerInfrastructure Service권한 상승 취약성</td></tr><tr><td>Windows HTTP Protocol Stack</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23392">CVE-2023-23392</a></td><td>HTTP프로토콜 스택 원격 코드 실행 취약성</td></tr><tr><td>Office for Android</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23391">CVE-2023-23391</a></td><td>Android용Office스푸핑 취약성</td></tr><tr><td>Windows Defender</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23389">CVE-2023-23389</a></td><td>Microsoft Defender권한 상승 취약성</td></tr><tr><td>Microsoft Bluetooth Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23388">CVE-2023-23388</a></td><td>Windows Bluetooth드라이버 권한 상승 취약성</td></tr><tr><td>Windows Point-to-Point Protocol over Ethernet (PPPoE)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23385">CVE-2023-23385</a></td><td>Windows PPPoE(Point-to-Point Protocol over Ethernet)권한 상승 취약성</td></tr><tr><td>Service Fabric</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23383">CVE-2023-23383</a></td><td>Service Fabric Explorer스푸핑 취약성</td></tr><tr><td>Visual Studio</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-22743">CVE-2023-22743</a></td><td>GitHub: CVE-2023-22743 - Git for Windows Installer권한 상승 취약성</td></tr><tr><td>Visual Studio</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-22490">CVE-2023-22490</a></td><td>GitHub: CVE-2023-22490비로컬 전송을 통한 로컬 클론 기반 데이터 반출</td></tr><tr><td>Power BI</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21806">CVE-2023-21806</a></td><td>Power BI보고 서버 스푸핑 취약성</td></tr><tr><td>Windows MSHTML Platform</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21805">CVE-2023-21805</a></td><td>Windows MSHTML플랫폼 원격 코드 실행 취약성</td></tr><tr><td>Windows Remote Procedure Call</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21708">CVE-2023-21708</a></td><td>원격 프로시저 호출 런타임 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Exchange Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21707">CVE-2023-21707</a></td><td>Microsoft Exchange Server원격 코드 실행 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1236">CVE-2023-1236</a></td><td>Chromium: CVE-2023-1236 Internals에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1235">CVE-2023-1235</a></td><td>Chromium: CVE-2023-1235 DevTools에서 유형 혼란</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1234">CVE-2023-1234</a></td><td>Chromium: CVE-2023-1234 Intents에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1233">CVE-2023-1233</a></td><td>Chromium: CVE-2023-1233 Resource Timing에서 불충분한 정책 적용</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1232">CVE-2023-1232</a></td><td>Chromium: CVE-2023-1232 Resource Timing에서 불충분한 정책 적용</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1231">CVE-2023-1231</a></td><td>Chromium: CVE-2023-1231자동 채우기에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1230">CVE-2023-1230</a></td><td>Chromium: CVE-2023-1230 WebApp Installs에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1229">CVE-2023-1229</a></td><td>Chromium: CVE-2023-1229권한 프롬프트에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1228">CVE-2023-1228</a></td><td>Chromium: CVE-2023-1228 Intents에서 불충분한 정책 적용</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1224">CVE-2023-1224</a></td><td>Chromium: CVE-2023-1224 Web Payments API에서 불충분한 정책 적용</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1223">CVE-2023-1223</a></td><td>Chromium: CVE-2023-1223자동 채우기에서 불충분한 정책 적용</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1222">CVE-2023-1222</a></td><td>Chromium: CVE-2023-1222 Web Audio API에서 힙 버퍼 오버플로</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1221">CVE-2023-1221</a></td><td>Chromium: CVE-2023-1221 Extensions API에서 불충분한 정책 적용</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1220">CVE-2023-1220</a></td><td>Chromium: CVE-2023-1220 UMA에서 힙 버퍼 오버플로</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1219">CVE-2023-1219</a></td><td>Chromium: CVE-2023-1219메트릭에서 힙 버퍼 오버플로</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1218">CVE-2023-1218</a></td><td>Chromium: CVE-2023-1218 WebRTC에서UaF(Use after free)</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1217">CVE-2023-1217</a></td><td>Chromium: CVE-2023-1217크래시 보고에서 스택 버퍼 오버플로</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1216">CVE-2023-1216</a></td><td>Chromium: CVE-2023-1216 DevTools에서UaF(Use after free)</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1215">CVE-2023-1215</a></td><td>Chromium: CVE-2023-1215 CSS에서 유형 혼란</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1214">CVE-2023-1214</a></td><td>Chromium: CVE-2023-1214 V8에서 유형 혼란</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1213">CVE-2023-1213</a></td><td>Chromium: CVE-2023-1213 Swiftshader에서UaF(Use after free)</td></tr><tr><td>Windows TPM</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1018">CVE-2023-1018</a></td><td>CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability</td></tr><tr><td>Windows TPM</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-1017">CVE-2023-1017</a></td><td>Microsoft TPM(신뢰할 수 있는 플랫폼 모듈)권한 상승 취약성</td></tr><tr><td>Open Source Software</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-43552">CVE-2022-43552</a></td><td>오픈 소스Curl원격 코드 실행 취약성</td></tr><tr><td>Microsoft Dynamics</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41127">CVE-2022-41127</a></td><td>Microsoft Dynamics NAV및Microsoft Dynamics 365 Business Central(온-프레미스)원격 코드 실행 취약성</td></tr><tr><td>AMD CPU Branch</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23825">CVE-2022-23825</a></td><td>AMD: CVE-2022-23825 AMD CPU분기 유형 혼동</td></tr><tr><td>AMD CPU Branch</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23816">CVE-2022-23816</a></td><td>AMD: CVE-2022-23816 AMD CPU분기 유형 혼동</td></tr><tr><td>Role: Windows Hyper-V</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23257">CVE-2022-23257</a></td><td>Windows Hyper-V원격 코드 실행 취약성</td></tr><tr><td>Windows DCOM Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26414">CVE-2021-26414</a></td><td>Windows DCOM서버 보안 기능 우회</td></tr><tr><td>Servicing Stack Updates</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/ADV990001">ADV990001</a></td><td>최신 서비스 스택 업데이트</td></tr></tbody></table>

### □ 작성 : \[KISA] 취약점분석팀

## 출처 : [KISA 바로가기](https://www.krcert.or.kr/kr/bbs/view.do?searchCnd=\&bbsId=B0000133\&searchWrd=\&menuNo=205020\&pageIndex=1\&categoryCode=\&nttId=71011)

{% embed url="<https://doc.skill.or.kr>" %}
NHN Cloud 정보 사이트&#x20;
{% endembed %}

{% embed url="<https://ssv.skill.or.kr>" %}
취약점 진단 분석 평가 방법 사이트&#x20;
{% endembed %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://sul.skill.or.kr/sw-hw-update-list/2023/ms-update-2023-02-10.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.